Skip to main content
Glama

@codinfy/mcp

The official Codinfy public MCP server

Connect any AI agent — Claude Code/Desktop, Cursor, Codex, Continue, Cline, Windsurf — to the Codinfy platform: validate licenses, check updates, browse the marketplace catalog and fetch the official design tokens.

npm version License: MIT Node MCP

📦 npm · 🌐 codinfy.com · 📚 docs.codinfy.com/mcp · 🛡️ Security

🇬🇧 English · 🇫🇷 Français


Status

v0.2.0 — 10 tools live, every one backed by a real shipped Codinfy API (no stubs, ever). Payments, OAuth (Login with Codinfy) and Ads tools ship together with their platform APIs.

Related MCP server: synter-mcp-server

Quick start

# Claude Code
claude mcp add codinfy -e CODINFY_LICENSE_SECRET=xxx -- npx -y @codinfy/mcp

Configs for Claude Desktop, Cursor, Codex, Continue and Cline: examples/. Full guide: docs/getting-started.md.

Tools

Category

Tools

Licenses (HMAC-signed)

codinfy_validate_license · codinfy_check_license_status · codinfy_get_grace_period · codinfy_check_license_update

Catalog

codinfy_list_products · codinfy_get_product · codinfy_search_products

Platform

codinfy_get_design_tokens · codinfy_health · codinfy_get_integration_links

Details: docs/api-reference.md · problems: docs/troubleshooting.md.

Environment

Variable

Required

Purpose

CODINFY_LICENSE_SECRET

license tools only

HMAC secret delivered with your license — never commit it

CODINFY_API_BASE

no

default https://api.codinfy.com/api

CODINFY_SITE_BASE

no

default https://codinfy.com

CODINFY_API_KEY

no

pk_live_… forwarded as X-Codinfy-Api-Key; key issuance arrives with the developer portal

Security model

  • Requests to the License API are signed HMAC-SHA256 over the raw body with an anti-replay timestamp (±300 s) — the same wire contract as the official PHP and Node SDKs (cross-language test vector in tests/).

  • Responses carry an RS256 JWT: verify it locally in your script (see the anti-tampering guide).

  • X-RateLimit-* headers are relayed in every tool result so agents can self-throttle (60 req/min/IP).

  • This public server never exposes internal Codinfy tooling (rule R15).

Development

npm install
npm test          # vitest — includes the PHP cross-language HMAC vector
npm run build     # tsc → dist/
node dist/index.js  # stdio server, "ready on stdio (10 tools)"

🌍 Connect with us

Network

Codinfy

Bakala Goin (Founder & CEO)

Facebook

@codinfyci

@bakalagoin

Instagram

@codinfyci

@bakalagoin

LinkedIn

company/codinfyen

bakala-goin

TikTok

—

@bakalagoin

X (Twitter)

—

@bakalagoin

License

MIT © 2026 RAFLOX SAS — Codinfy, Abidjan, Côte d'Ivoire.


Codinfy — by RAFLOX SAS · 📧 contact@codinfy.com · 🌐 codinfy.com

Part of the Codinfy MCP ecosystem · codix-build-mcp

Available Tools

17 tools
check_license_statusA

Return the current status of a license (active | expired | suspended | cancelled) and its grace period.

create_checkoutA

Create a Codinfy Pay checkout session via GeniusPay direct API. Returns a pay.codinfy.com URL or a USSD push reference.

get_ads_configA

Return the public configuration of the Codinfy Ads SDK for the calling site.

get_brand_assetsA

Return signed URLs for brand assets (logo light/dark/icon/og/pwa).

get_brand_settingsA

Return public brand metadata (site name, logos, social links) — sourced from Brand Manager (R13).

get_design_tokensA

Return Codinfy's current design tokens (palette, typography, spacing) from Brand Manager.

get_payment_statusA

Poll a payment status by reference (used by the wait screen on pay.codinfy.com).

get_productC

Get a product by slug or id.

list_ad_unitsA

List the Codinfy Ad Network ad units available for a publisher.

list_geniuspay_operatorsA

List the active GeniusPay operators (per country) with their logos and payment methods.

list_productsA

List published marketplace products (cursor-paginated).

list_user_licensesA

List all licenses owned by the current authenticated user.

oauth_discovery_metadataA

Return the OpenID Connect discovery metadata (auth.codinfy.com/.well-known/openid-configuration).

oauth_jwksA

Return the JWKS used to verify ID tokens issued by Codinfy Identity.

search_productsB

Full-text search across the marketplace catalog.

track_eventA

Track a public event on Codinfy's analytics pipeline (CRM funnel + product analytics).

validate_licenseC

Validate a Codinfy purchase code against the licensing API (HMAC + JWT).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    A3.5/5.0

    Scored across 17 tools

    Disambiguation5/5

    All 17 tools have clearly distinct purposes. Each targets a specific resource and action (e.g., license validation vs. status check, brand assets vs. settings). There is no overlap that would confuse an agent.

    Naming Consistency5/5

    All tools use a consistent verb_noun snake_case pattern (e.g., create_checkout, get_product, list_ad_units). Even OAuth tools follow this implicitly. No mixing of conventions.

    Tool Count4/5

    17 tools cover multiple subdomains (licensing, payments, ads, branding, marketplace, auth, analytics). While slightly above the typical 15-tool threshold, each tool serves a distinct need and the count is justified for the platform's breadth.

    Completeness4/5

    The tool surface covers key read operations and essential writes (checkout creation, event tracking) across all subdomains. Minor gaps exist (e.g., no product creation or license revocation), but for a client-facing API these are acceptable and do not hinder common workflows.

    Maintenance

    ActivityInactive
    ResponsivenessNo recent community issues

    Related MCP Connectors

    Related MCP Servers